Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          0DlBKVCojaRP86SRL03F7rcWz907oaolB+hRggEG+nA=
Subject key identifier:   67:FA:1A:D4:0A:05:64:D7:F3:24:09:B7:08:BA:97:2F:12:A8:64:84
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       01962DF40FBB1527EA289D27EC189BA2127B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          07A3
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: CLvJ4T3bsIxsEgDouNp+Z2fjWK7aO2jzFdOGG75CZ/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0f:bb:15:27:ea:28:9d:27:ec:18:9b:a2:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=67fa1ad40a0564d7f32409b708ba972f12a86484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:af:52:30:65:99:5d:5e:8b:66:bb:2d:a4:
                    31:62:dc:bc:b7:65:ea:15:16:3d:d2:e7:25:15:10:
                    b9:c1:2e:65:42:76:69:46:75:59:42:21:06:68:94:
                    1f:d6:f6:db:8c:d6:35:a7:bb:86:d3:be:3c:aa:c2:
                    07:43:bb:1c:62:c2:64:65:c9:75:ce:b4:7e:b9:2a:
                    a0:cf:da:6d:94:d0:99:9e:40:e8:23:d1:9b:9d:5f:
                    0a:aa:2e:66:5d:d2:66:40:e2:e4:56:cf:7e:21:8c:
                    80:a6:12:22:1a:0e:82:8d:e3:a4:bb:3a:ac:27:9d:
                    e8:4a:d8:bf:ba:5d:e4:12:3a:33:cc:6e:28:49:7b:
                    6b:f1:78:9f:48:e4:a3:c2:ac:79:1c:f1:74:ff:a2:
                    1f:95:55:01:39:5f:10:14:62:18:8d:6d:ef:51:09:
                    ee:cf:7a:19:5b:d4:92:c0:72:e0:63:33:8c:36:0e:
                    1b:0c:11:0b:9a:4d:85:dd:9d:07:08:a7:14:ab:fb:
                    51:5d:b4:6f:4e:51:49:27:2e:36:af:58:d2:df:f7:
                    ff:ed:cd:93:d3:69:c4:e8:fb:30:c8:81:0b:fd:ee:
                    33:c1:3d:34:15:36:0e:a3:6a:28:d0:f7:46:7a:30:
                    d4:f6:5b:74:67:27:8e:ba:9d:b6:14:c6:14:dd:1e:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FA:1A:D4:0A:05:64:D7:F3:24:09:B7:08:BA:97:2F:12:A8:64:84
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:8b:a4:62:1b:81:85:8b:6a:9a:39:78:8b:7c:06:fd:0c:
         14:d1:cd:71:e5:fc:e8:50:2a:6e:2e:16:6a:32:52:ec:0a:ac:
         5b:5e:10:7f:8b:71:ff:0f:36:b8:f8:c4:d1:27:b4:19:c3:6f:
         ed:89:f1:1f:cc:cd:42:8b:62:42:69:2d:f4:5d:53:db:bb:11:
         c8:8b:5c:7b:6b:b6:62:f1:2e:33:42:ae:57:c5:25:7c:6e:18:
         9c:ac:89:1b:fa:99:c2:be:67:5c:f6:42:67:ea:9d:8c:5d:b1:
         22:d1:8f:56:5f:d9:0b:c5:a2:9f:1f:45:84:cb:96:c0:40:f2:
         1b:ae:d4:a9:6e:3c:90:b2:bf:02:5f:e9:35:d7:6c:65:c7:63:
         57:b6:f1:37:64:7e:e8:1e:36:53:57:25:6b:76:50:f3:56:84:
         2a:bc:93:ad:08:d7:9d:0a:d8:11:2a:79:4b:48:92:a3:31:0a:
         79:ec:23:b1:c7:7a:b0:d5:ae:9f:58:78:fb:77:b4:1f:08:83:
         b1:36:b1:c6:8c:a8:4b:40:0b:21:68:c4:00:e6:b2:6a:b2:69:
         e5:f4:dc:54:5f:0a:a6:02:59:ec:2f:29:9f:14:81:a8:9b:09:
         de:4d:7e:eb:95:72:c9:d7:43:1d:a5:89:85:24:0e:a7:d1:1f:
         ac:88:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----